CVE-2017-8816

CVE-2017-8816 describes a critical integer overflow vulnerability in the NTLM authentication feature of curl and libcurl versions prior to 7.57.0, specifically impacting 32-bit platforms. This flaw allows remote attackers to trigger a denial of service through an application crash due to a resultant buffer overflow, or potentially achieve other unspecified impacts, by supplying excessively long user and password fields. With a CVSS score of 9.8 (Critical) and a FAUCET Risk Score of 92/100, this vulnerability poses a significant threat due to its network-based attack vector, low attack complexity, and high potential for impact on confidentiality, integrity, and availability. Despite its high severity and notable community discussion (10 mentions), there is currently no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB.